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DETAILED ACTION 
1. Claims 1-17 are pending. This is a Final rejection. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 
122(b), by another filed in the United States before the invention by the applicant for patent or 
(2) a patent granted on an application for patent by another filed in the United States before 
the invention by the applicant for patent, except that an international application filed under 
the treaty defined in section 351(a) shall have the effects for purposes of this subsection of an 
application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

2. Claims 1-2 are rejected under 35 U.S.C. 102(e) as being anticipated 
by Ramberg, et al. (US 6,857,013). 



As per claim 1: 

discloses a GUI-equipped terminal apparatus which is connected to 
another terminal device through a network, and forms a distributed software 
environment, comprising: 

GUI display means; [col.6, lines 61-62] 

a virtual language environment which is a program execution environment 
in which a program code generated in a predetermined language can be 
executed independent of a specific type of apparatus; [col.5, lines 45-51 and 
col. 10, lines 48-67] 
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access limit confirmation means of operating in another execution 
environment different from said virtual language environment; and [col.7, lines 
27-53 and col. 8, line 63 thru col. 9, line 5] 

network l/F means, wherein: 

said network l/F means exchanges information with another terminal 
device through the network; [col.5, line 64 thru col.6, line 1] 

said GUI display means displays an application GUI at an instruction from 
an application executed in said virtual language environment, and displays an 
access limit confirmation GUI at an instruction from said access limit confirmation 
means; and [col. 8, lines 48-56] 

said access limit confirmation means receives an access confirmation 
message encrypted by another terminal device through said network l/F means, 
and transmits an encrypted access confirmation reply message to said other 
terminal device through said network l/F means, [col.9, lines 57-63 and col. 19, 
lines 19-31] 
As per claim 2: 

discloses the GUI-equipped terminal apparatus according to claim 1 , further 
comprising display means of displaying an image drawing signal output from said 
GUI display means on a monitor, wherein: 

said GUI display means has an external output terminal; [col.6, lines 61- 

62] 

said GUI display means displays the application GUI at an instruction from 
an application executed in said virtual language environment only on said display 
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means or both said display means and said external output terminal; and [col.8, 
lines 48-56] 

when an instruction from said access limit confirmation means is received, 
said access limit confirmation GUI is displayed only on said display means, and 
not on said external output terminal, [col.9, lines 44-48] 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

3. Claims 3-17 are rejected under 35 U.S.C. 102(e) as being 
unpatentable over Ramberg, et al. (US 6,857,013). 

As per claim 3: 

Ramberg discloses a resource control terminal apparatus which is 
connected to another terminal device through a network, and forms a distributed 
software environment, comprising: 
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a virtual language environment which is a program execution environment 
in which a program code generated in a predetermined language can be 
executed independent of a specific type of apparatus; [col.5, lines 45-51 and 
col. 10, lines 48-67] 

access limit search means of operating in another execution environment 
different from said virtual language environment; and [col.10, lines 55-67] 
network l/F means, wherein: 

said network l/F means exchanges information with said another terminal 
device through said network; [col.5, line 64 thru col. 6, line 1] 

said access limit search means receives and encrypts an access limit 
search request from an resource control program code executed in said virtual 
language environment [col.9, lines 57-59], and transmits the access 
confirmation message to said other terminal device through said network l/F 
means, receives and decrypts an encrypted access confirmation reply message 
from said other terminal device through said network l/F means; and [col.9, 
lines 27-30 and col.11, lines 21-38] 

said access limit search means answers said access limit search request 
from the resource control program code according to said decrypted access 
confirmation reply message, [col.8, lines 62-66] 

Ramberg discloses security authentication and encoding the 
message content but did not discuss decrypting the message. It would 
have been obvious for a person of ordinary skill in the art to include a 
decryption process if an encryption process is involved in order to view the 
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contents of the message. 
As per claim 4: 

Ramberg discloses the resource control terminal apparatus according to claim 3, 
wherein: 

said access limit search means receives an access limit search request 
specifying an optional program ID from said resource control program code; 
[col. 8, lines 15-24 and col. 9, lines 24-27] 

said access limit search means retrieves said other terminal device in 
which a program having said program ID is being executed; [col.8, lines 63-65] 

said access limit search means transmits said encrypted access 
confirmation message to said retrieved other terminal device through said 
network l/F means; [col.5, line 64 thru col.6, line 1] 

said access limit search means receives an encrypted access 
confirmation reply message from said retrieved other terminal device through 
said network l/F means, and decrypts said encrypted access confirmation reply 
message; and [col.9, lines 57-59] 

said access limit search means answers an access limit search request 
from said resource control program code according to said decrypted access 
confirmation reply message, [col.8, lines 62-66] 

Ramberg discloses security authentication and encoding the 
message content but did not discuss the decrypting the message. It would 
have been obvious for a person of ordinary skill in the art to include a 
decryption process if an encryption process is involved. 
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As per claim 5: 

Ramberg discloses the resource control terminal apparatus according to claim 3, 
wherein: 

said access limit search means receives an access limit search request 
specifying a profile ID from said resource control program code; [col.17, lines 
56-58] 

said access limit search means retrieves a terminal device having a 
permission right corresponding to said profile ID; [col.8, lines 15-20 and col.9, 
lines 1-30] 

said access limit search means transmits an encrypted access 
confirmation message to a terminal device having said permission right through 
said network l/F means; [col.8, lines 63-65] 

said access limit search means receives an encrypted access 
confirmation reply message from the terminal device having said permission right 
through said network l/F means, and decrypts said encrypted access 
confirmation reply message; and [col.9, lines 57-59] 

said access limit search means answers an access limit search request 
from said resource control program code according to said decrypted access 
confirmation reply message, [col.8, lines 62-66] 

Ramberg discloses security authentication and encoding the 
message content but did not discuss decrypting the message. It would 
have been obvious for a person of ordinary skill in the art to include a 
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decryption process if an encryption process is involved in order to view the 
contents of the message. 

As per claim 6: 

A network system, comprising: 

at least one GUI-equipped terminal apparatus connected to a network; 
and [col. 6, lines 62] 

at least one resource control terminal apparatus connected to said 
network, wherein: 

said GUI-equipped terminal apparatus and said resource control terminal 
apparatus from a distributed software environment; [col.4, lines 10-27] 
said GUI-equipped terminal apparatus comprises: 

GUI display means; [coL6, lines 62] 

a first virtual language environment which is a program execution 
environment in which a program code generated in a predetermined language 
can be executed independent of a specific type of apparatus; [col.5, lines 45-51] 

access limit confirmation means of operating in another execution 
environment different from said first virtual language environment; and [col.7, 
lines 46-49] 

first network l/F means, wherein: 
said resource control terminal apparatus comprises: 
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a second virtual language environment which is a program execution 
environment in which a program code generated in said predetermined language 
can be executed independent of a specific type of apparatus; [col.5, lines 45-51] 

access limit search means of operating in another execution environment 
different from said second virtual language environment; and [col. 10, lines 55- 
63] 

second network l/F means, wherein: 

said first network l/F means exchanges information with said resource 
control terminal apparatus through said network; [col.5, lines 64-65] 

said second network l/F means exchanges information at least with said 
GUI-equipped terminal apparatus through said network; [col.5, line 66] 

said access limit search means receives an access limit search request 
from a resource control program code executed in said second virtual language 
environment, and encrypts the request, and transmits said access confirmation 
message to said GUI-equipped terminal apparatus through said second network 
l/F means; [ col.7, lines 2-4 and col.10, lines 65-67] 

said access limit confirmation means receives said encrypted access 
confirmation message from said access limit search means through said first 
network l/F means, decrypts said access confirmation message, and outputs the 
decrypted message to said GUI display means; [col.9, lines 57-59] 

said GUI display means displays an application GUI at an instruction from 
an application executed in said first virtual language environment, and displays 
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an access limit confirmation GUI upon receipt of said access confirmation 
message from said access limit confirmation means; [col.8, lines 23-25] 

said GUI display means outputs an input to said access limit confirmation 
GUI to said access limit confirmation means; [col.8, lines 45-51] 

said access limit confirmation means generates an access confirmation 
reply message from said input and encrypts the message, said encrypted access 
confirmation reply message is transmitted to said resource control terminal 
apparatus through said first network l/F means; and [col.9, lines 27-30 and 
col.11, lines 21-38] 

said access limit search means receives the encrypted access 
confirmation reply message from said GUI-equipped terminal apparatus through 
said second network l/F means, decrypts the message, and answers the access 
limit search request from said resource control program code according to said 
decrypted access confirmation reply message, [col.8, lines 62-66] 

Ramberg discloses security authentication and encoding the 
message content but did not discuss decrypting the message. It would 
have been obvious for a person of ordinary skill in the art to include a 
decryption process if an encryption process is involved in order to view the 
contents of the message. 
As per claim 7: 

discloses the network system according to claim 6, wherein: 

plurality of said GUI-equipped terminal apparatus is connected to a 
plurality of said networks; [col.8, lines 52-56] 
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said resource control terminal apparatus broadcasts an access 
confirmation message to said GUI-equipped terminal apparatus; [col.8, lines 22- 
25] 

when said GUI-equipped terminal apparatus is directly operated by a 
user, does not receive another access confirmation reply message in response to 
said access confirmation message from said other GUI-equipped terminal 
apparatus, and receives said access confirmation message transmitted from said 
resource control terminal apparatus, said GUI-equipped terminal apparatus 
transmits an access limit confirmation receipt message, performs a GUI display, 
confirms a request of the user, and broadcasts an access confirmation reply 
message, [col.8, lines 3-26 and 62-64] 
As per claim 8: 

discloses the network system according to claim 6 or 7, wherein: 

said access confirmation message transmitted from said resource control 
terminal apparatus contains bit map data of a GUI image for a user selecting 
information about access limit requested from said application; [col.6, lines 7-9] 

said access confirmation reply message transmitted from said GUI- 
equipped terminal apparatus contains coordinates of a position at which the user 
performs an action on said bit map data of said GUI image; [col.6, lines 15-40] 
said resource control terminal apparatus confirms selection of a user for 
information about said access limit based on said coordinates of the position, and 
answers the access limit search request from said application based on said 
selection of the user, [col.8, line 61 - col.9, line 3] 
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As per claim 9: See COL. 8, lines 26-55 and col.9, lines 19-20; discussing 
the network system according to claim 8 f wherein said resource control terminal 
apparatus changes a position or an expression of a GUI unit forming bit map 
data of a GUI image contained in said access confirmation message each time 
said resource control terminal apparatus transmits said access confirmation 
message. 

As per claim 10: See col. 8, lines 62-66 and col. 11, lines 26-27; discussing 
the resource control terminal apparatus according to claim 3, wherein said 
resource control program code comprises the steps of: transmitting said access 
limit search request when an access request is received from another program; 
receiving a reply to said access limit search request; and determining according 
to said reply whether or not said access request can be accessed. 
As per claim 11: 

Ramberg discloses the resource control terminal apparatus according to claim 4, 
wherein said resource control program code comprises the steps of: 

specifying a program ID indicating the other program to said access limit 
search means when an access request is received from the other program and 
transmitting said access limit search request; [col.8, lines 15-20 and col.9, lines 
1-30] 

receiving a reply to said access limit search request; and determining 
whether or not access at said access request can be accepted according to said 
reply. [col.8, lines 63-66] 
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As per claim 12: 

Ramberg discloses the resource control terminal apparatus according to claim 5, 
wherein said resource control program code comprises the steps of: 

specifying said profile for said access limit search means when receiving 
an access request from another program; [col.8, lines 15-20 and col.9, lines 1- 
30] 

transmitting said access limit search request; receiving a reply to said 
access limit search request; and [ col J, lines 2-4 and col.9, lines 29-30] 

determining whether or not said access request can be accepted 
according to said reply, [col.8, lines 15-20 and lines 63-66] 
As per claim 13: 

Ramberg discloses the resource control terminal apparatus according to any one 
of claims 3 to 5, wherein said resource control program code comprises the steps 

of: s 

performing an access limit search request in a same procedure as an 
access confirmation request issued from a current program when receiving an 
access confirmation request from another program; and [ col.7, lines 2-4 and 
col.9, lines 29-30] 

determining whether or not the access confirmation request can be 
accepted according to a reply to the request, [col.8, lines 15-20 and lines 63- 
66] 

As per claim 14: See col.6, lines 16-22 and 61-62; discussing a computer- 
processible medium storing a program and/or data used to direct a computer to 
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perform all or a part of functions of all or a part of means of the resource control 
terminal apparatus or the GUI-equipped terminal apparatus. 
As per claim 15: See col.6, lines 16-22 and 61-62; discussing an information 
aggregate which is a program and/or data used to direct a computer to perform 
all or a part of functions of all or a part of means of the resource control terminal 
apparatus or the GUI-equipped terminal apparatus according to any one of 
claims 1 to 9. 

As per claim 16: See col.6, lines 16-22 and 61-62; discussing a computer- 
processible medium storing the steps of all or a part of said resource control 
program code of said resource control terminal apparatus according to any one 
of claims 10 to 13. 
As per claim 17: 

In a users network including first and second terminals communicating with each 
other, in which the first terminal executes programs using a first virtual language 
and the second terminal executes programs using a second virtual 
language, and the second terminal controls access to a communications 
network, using a method of controlling access to the communications network 
comprising the steps of: 

a) requesting, from the first terminal to the second terminal, access to the 
communications network; [col. 8, lines 63-66] 

(b) using an execution program, free-of the second virtual language, in the 
second terminal to determine if access is permissible to the requesting first 
terminal in step (a); [col.5, lines 45-51 and col. 10, lines 48-67] 
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(c) sending, from the second terminal to the first terminal, an encrypted 
access confirmation message [col.9, lines 57-59] to confirm the access request 
of step (a); [ col.7, lines 2-4 and col.9, lines 29-30] 

(d) using an execution program, free-of the first virtual language, in the 
first terminal to decrypt the encrypted access confirmation message sent in step 
(c) and confirm the access request of step (a); 

Ramberg discloses security authentication and encoding the 
message content but did not discuss decrypting the message. It would 
have been obvious for a person of ordinary skill in the art to include a 
decryption process if an encryption process is involved in order to view the 
contents of the message. 

(e) replying, from the first terminal to the second terminal, an encrypted 
reply message to the decrypting performed in step (d); and [col.8, lines 20-25] 

(f) granting the first terminal access to the communications network, after 
successfully performing step (e). [col.8, lines 63-66] 
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Response to Arguments 

4. Applicant s arguments filed October 21, 2005 have been fully 
considered but they are not persuasive. 

Access limitation can broadly interpret as having some kind of 
safeguard for access to an environment where the limitations does not 
further limit the kind or how much is considered the limit of an access to 
the environment. Hence, the following discussion concerns the access 
limitation means. 

Ramberg discloses Java applets are used by the user to interface 
and SNMP to communicate with the ADC device platforms (col. 5, lines 
43-45). The SNMP is a network management protocol that servers 
maintains a set of management information such as statistics, status, 
and configuration values in a Management Information Base (MIB) (col. 6, 
lines 45-54), and performs pack verification (col.7, lines 1-4). Thus, 
Ramberg discloses the plurality of ADC devices with the SNMP may each 
operate under a different communications protocol or system (col.7, lines 
47-51) is the another execution environment that is different or outside 
from the Java and its application or applets (virtual language 
environment) used by web browsers on the World Wide Web. 

Ramberg includes the MIB that provides management information 
for the SNMP devices and its ADC platforms where the MIB manages 



Application/ Control Number: 09/867,906 Page 
Art Unit: 2135 

what is able to modify or view and having certain configuration, control 
and statistics data to limit access to the environment which is the ADC 
platform that is the access limitation means. Ramberg discusses the 
access limit confirmation means on COL.7, lines 32-36, having the ability 
to modify or view including configuration, control, and statistics data 
particular to the ADC platform. In addition, Ramberg includes security 
profiles that have different capabilities from ADC platforms to platforms 
(col. 9, lines 1-5) and sockets that provide an identifier for a particular 
service on a particular node to govern the data packets and verification of 
the packets (col.9, lines 24-30). 

Ramberg discloses the Java applets is in the form of virtual 
language environment that executes the GUI that operates from both the 
network controller and from a web browser (col. 8, lines 52-56) wherein 
the web browser is the display means that inherently displays the 
application GUI. 

Applicant states that the GUI display means locally displays both 
an application GUI, but fails to have this limitation in any of the 
independent claims. In addition, the claim language contradicts to 
applicant's argument. 

Claim 1 states: 

network l/F means, wherein: 

said network l/F means exchanges information with another terminal device 
through the network; 
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said GUI display means displays an application GUI at an instmction from an 
application executed in said virtual language environment, and displays an 
access limit confirmation GUI at an instruction from said access limit confirmation 
means; and 

said access limit confirmation means receives an access confirmation message 
encrypted by another terminal device through said network l/F means, and 
transmits an encrypted access confirmation reply message to said other terminal 
device through said network l/F means. 

The claims indicates exchanging information with another terminal 
device through the network and further speaks of the GUI display means 
to display the access limit confirmation whereby receiving an access limit 
confirmation message encrypted by another terminal device through the 
network l/F means and transmitting the reply message to another 
terminal device through the network I/F means. Therefore, only 
communicating remotely is in the claimed invention and locally 
displaying is not claimed. In essence of the argument, Ramberg not only 
uses the GUI remotely but also locally (col.6, lines 61-63). 

Ramberg discloses the access confirmation message to confirm the 
access request on COL7, lines 2-4 and COL. 9, lines 29-30. 
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Conclusion 

5. THIS ACTION IS MADE FINAL. Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1. 136(a). 

A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event 
a first reply is filed within TWO MONTHS of the mailing date of this final 
action and the advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory 
period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1. 136(a) will be calculated from the 
mailing date of the advisory action. In no event, however, will the 
statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to LEYNNA T. HA 
whose telephone number is (571) 272-3851. The examiner can normally 
be reached on Monday - Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached on (571) 272-3859. 
The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either 
Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more 
information about the PAIR system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact 
the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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